Skip to content

Commit

Permalink
Suppress errors on the OpenSSL error stack
Browse files Browse the repository at this point in the history
P11PROV_raise() emits errors in the openssl error stack.

The OpenSSL TLS code checks the error stack and fails TLS operations
if any error is found on the stack.

Change pkcs11-provider code to not emit on the openssl error stack
when operations fail, as sometimes that is expected and the code
can still complete the overall requested operation via fallbacks.

The code now emits only a debug error, which is routed to the
pkcs11-provider debug file and does not poison the OpenSSL error stack.

NOTE: This requires a change in a test. As we change the errors we throw
on the Stack OpenSSL interprests the error differently and prints a
different error message.

Signed-off-by: Simo Sorce <[email protected]>
  • Loading branch information
simo5 committed Dec 19, 2024
1 parent e4cb06a commit 6f02859
Show file tree
Hide file tree
Showing 3 changed files with 131 additions and 131 deletions.
Loading

0 comments on commit 6f02859

Please sign in to comment.